block file creation inside a directory

NTFSD
1

I am writing a file system minifilter. I want to block the file creation inside a subdirectory. Whenever a file is created manually inside a directory lots of IRP_MJ_CREATE request are raised. I am confused why so much requests are raised. Can anyone please help me block file creation in a directory.

2

Can anyone please help me block file creation in a directory

return FLT_PREOP_COMPLETE```

That is the answer to the question you asked.  For the rest you have to understand the environment more.  Like I just said, study it
1 Like